auditd dispatch script